More study resources

About this exam

The Fortinet FCX (Fortinet Certified Expert) is an expert-level certification from the Fortinet Training Institute, aimed at experienced security and network professionals who design, deploy, and operate Fortinet-based security architectures. The exam spans six domains: FortiOS and Security Fabric architecture (20%), secure networking including NGFW, SD-WAN, switching, and wireless LAN (20%), Unified SASE and secure access (15%), cloud security (15%), security operations covering SOC, SIEM, SOAR, EDR, and NDR (20%), and operational technology security (10%). Candidates typically hold senior engineer, architect, or consultant roles and already work hands-on with FortiGate, FortiManager, FortiAnalyzer, FortiSASE, and FortiSOAR. Preparation should combine deep FortiOS CLI and policy troubleshooting with design scenarios across hybrid mesh firewall, SASE, and OT segmentation. Study the Fortinet Training Institute materials, the FortiOS documentation, and the product pages for each domain. Because the exam is scenario-heavy, practice explaining trade-offs: when to use FortiSASE versus on-premises enforcement, how to structure SD-WAN rules, and how to integrate FortiEDR and FortiNDR telemetry into FortiSIEM and FortiSOAR playbooks. Operational technology questions emphasize visibility and segmentation for SCADA and ICS environments. Note that the exact number of questions, time limit, passing score, fee, retake policy, and validity period are not published in the source used here; verify these with Fortinet before scheduling. This page is independent study material and is not affiliated with or endorsed by Fortinet.

What you'll study

Common questions

About Fortinet FCX preparation

What is the FCX certification for?

It validates expert-level ability to architect, deploy, and operate Fortinet security and networking solutions across the Security Fabric. It targets senior engineers, architects, and consultants who work with FortiOS, secure networking, SASE, cloud security, security operations, and OT security.

How hard is the FCX exam?

Expect expert difficulty. Questions are scenario-based and require design judgment, not just recall. You should be fluent in FortiOS CLI troubleshooting, SD-WAN rule design, SASE architecture, SOC workflows, and OT segmentation. Hands-on lab experience matters more than memorizing product names.

What is the exam format and how long does it take?

The source provided here does not state the question count, question types, or time limit. Check the Fortinet Training Institute certification page for the current format before you schedule. Do not rely on older third-party figures, since exams are revised.

What score do I need to pass?

The passing score is not published in the source used for this page. Fortinet sets and can revise the passing standard, so confirm it on the official certification page. Treat any fixed percentage you see elsewhere as unverified.

How much does the exam cost and can I retake it?

Fee and retake policy are not stated in the source. Fortinet publishes exam pricing and retake rules through its Training Institute and testing partner. Verify both before booking, and budget time for a possible second attempt if your first result is close.

How long is the certification valid?

The validity period is not specified in the source. Fortinet certification validity and recertification requirements are published by the Fortinet Training Institute. Check the current policy, because recertification options and validity windows can change between exam revisions.

In what order should I study the six domains?

Start with FortiOS and Security Fabric architecture, since every other domain assumes it. Then secure networking, Unified SASE, cloud security, security operations, and finally OT security. This order builds from platform fundamentals to specialized environments and matches the weighting, with architecture and secure networking and SecOps each at 20%.

What are common failure modes on this exam?

Candidates often lose points by answering from product memory instead of design reasoning: choosing FortiSASE when on-premises enforcement fits better, misordering SD-WAN rules, or ignoring telemetry integration between FortiEDR, FortiNDR, FortiSIEM, and FortiSOAR. Weak FortiOS CLI fluency and shallow OT segmentation knowledge are also frequent gaps.

Is this page affiliated with Fortinet?

No. This is independent study material written for candidates searching for FCX information. It is not affiliated with, endorsed by, or sponsored by Fortinet. Always confirm exam logistics and official objectives with Fortinet directly.